Oracle Data Safe, the unified control center for your Oracle databases, now provides the capability to schedule and automate audit reports so that the auditors periodically receive them at a scheduled frequency.
Demonstrating audit compliance to auditors and security compliance professionals requires periodic reports showing database activity – the information you are collecting in your audit trail. Data Safe lets you automate report generation, helping ensure that your security compliance reports are ready when you need them. Working with the Oracle Cloud Infrastructure (OCI) notification service, Data Safe generates events that can be used to notify auditors that reports are ready, or integrate Data Safe with other services to retrieve, store, and process those reports.
To schedule periodic reports, open Security Center, navigate to Activity Auditing and under related resources, click Audit Reports. Select the report that you wish to schedule and click Manage Report Schedule as shown below. Manage Report Schedule lets you define the schedule frequency, report format, time span of audit events and set limits on the number of rows that will be contained within a report.
Manage Report Schedule
The latest report is available for download in Audit Reports.
Prior reports are available for download in Audit Reports History. The historical list makes it easy to pick out the latest report, determine if the report was generated on-demand or by schedule, and verify the file format for the report.
For pro-active notifications when a scheduled report is generated, leverage the Data Safe OCI event Scheduled Report Generated and configure rules in OCI Events service as shown below.
In the Event Rule actions, associate an appropriate notification action. The screenshot below shows an email subscription notification associated to the rule action to pro-actively trigger an email to let the auditor know of the latest scheduled report instance whenever it is generated.
When the scheduled report is generated, an email notification is triggered with the format as shown below.
Note two of the links embedded in the email. The hyperlink in reportURLInConsole lets the auditor navigate to the Oracle Data Safe service console, and by clicking Download Report, they are able to download the scheduled report instance.
To automate download of the report, use the hyperlink in reportURL to access the report from any OCI SDK client. The helpDoc parameter refers to the Data Safe API required for invocation: getReportContent.
For instance, sample REST invocation of getReportContent with POSTMAN using value in reportURL is shown below.
Sample OCI-CLI invocation of getReportContent using value in reportURL is shown below.
In a nutshell, to enable continuous availability of audit reports to your auditors and security administrators to help meet compliance requirements, leverage the scheduling and associated automation capability offered by Oracle Data Safe service.
Source: oracle.com
Posts
0 comments:
Post a Comment